{
  "entry": {
    "kind": "mcp",
    "slug": "context7",
    "name": "Context7",
    "vendor": "Upstash",
    "description": "Context7 fetches version-current documentation and code examples for libraries and injects them into an agent's context, so generated code matches the version you actually depend on rather than whatever was most common in training data.\n\nIt is one of the lowest-risk servers in wide use: outbound network access only, no credentials, no filesystem, no writes. The residual consideration is supply-chain shaped rather than access shaped — the server decides which documentation text lands in your model's context, and documentation is instructions. A compromised or poisoned docs source is a prompt-injection vector into every session that queries it, which is an argument for pinning to well-known libraries and reading generated code rather than trusting it.",
    "website": "https://context7.com",
    "repository": "https://github.com/upstash/context7",
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "official",
    "capabilities": [
      "network:outbound"
    ],
    "packaging": null,
    "configFiles": null,
    "category": null,
    "updatedAt": "2026-09-02",
    "risk": {
      "score": 10,
      "band": "low",
      "signals": [
        {
          "id": "trust-official",
          "kind": "trust",
          "label": "Published by the vendor",
          "contribution": -40
        }
      ],
      "dangerousCombos": []
    },
    "dangerousCombos": []
  }
}